SSL Certificate

Secure Socket Layer certificate is a digital certificate that authenticates a website's identity and encrypts data transmitted between the website and users' browsers, essential for secure online payment processing.

SSL certificates (now technically TLS - Transport Layer Security - certificates, though commonly still called SSL) create encrypted connections between web servers and browsers, ensuring that data transmitted cannot be intercepted or read by third parties. When a website has an active SSL certificate, browsers display a padlock icon in the address bar and use "https://" instead of "http://" in the URL, signaling to users that the connection is secure.

For e-commerce and any website collecting payment information, SSL certificates are not optional. PCI DSS requires that all payment pages and any pages transmitting cardholder data use SSL/TLS encryption with a minimum of 128-bit encryption. Major browsers now flag websites without SSL certificates as "Not Secure," which can significantly damage customer trust and conversion rates. Additionally, Google uses HTTPS as a ranking signal, meaning sites without SSL certificates may rank lower in search results.

SSL certificates are issued by Certificate Authorities (CAs) after verifying the website owner's identity. Types of SSL certificates include Domain Validation (DV) certificates that verify only domain ownership and issue within minutes to hours, Organization Validation (OV) certificates that verify business legitimacy and take 1-3 days to issue, and Extended Validation (EV) certificates that require extensive business verification and display the company name in the browser address bar. For payment processing, at minimum an OV certificate is recommended, though many businesses opt for EV certificates for the additional trust signals they provide. SSL certificates typically cost $50-$300 annually depending on type and provider, though some hosting providers now include free DV certificates.

Optimize Your Payment Processing

Let Verisave analyze your merchant statement to identify hidden fees and misconfigurations related to ssl certificate.

Get a Free Audit

Related Terms

3D Secure

An authentication protocol for online card transactions that adds an additional verification layer between the cardholder and issuing bank, shifting fraud liability from merchants to card issuers when properly implemented.

ACH Payment

Automated Clearing House payment is an electronic bank-to-bank payment method that transfers funds directly between bank accounts through the ACH network, typically used for direct deposits, bill payments, and recurring transactions.

Acquirer

A financial institution that processes credit card payments on behalf of merchants, maintains merchant accounts, and facilitates the settlement of funds from card-issuing banks to merchant bank accounts.

Address Verification Service (AVS)

A fraud prevention tool that compares the numeric portions of a billing address provided during a transaction against the address registered with the card-issuing bank, returning match result codes to help merchants assess transaction risk.

Aggregator

A payment service provider that enables multiple merchants to process card transactions under a single master merchant account rather than each merchant having their own dedicated merchant account, common with services like Square, Stripe, and PayPal.